Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          YE0po+kwLX/ajHFkCTBjt8KhyQLgPKWh8n0t3LkN1/Q=
Subject key identifier:   44:EC:2E:90:BC:EA:F7:E8:9E:82:AA:EA:B4:22:FF:97:D7:BC:5B:7E
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       0196A1D2229468DE95077FC1330B63979CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 19:00:25 +0000
Manifest this update:     Mon 05 May 2025 19:00:25 +0000
Manifest next update:     Tue 06 May 2025 19:00:25 +0000
Files and hashes:         1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=)
                          2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: IixHHIBEzvt1T+K8HpyRYZof9K7Dq2Ey072GvWmYRuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:22:94:68:de:95:07:7f:c1:33:0b:63:97:9c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: May  5 19:00:25 2025 GMT
            Not After : May  6 19:00:25 2025 GMT
        Subject: CN=44ec2e90bceaf7e89e82aaeab422ff97d7bc5b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:6f:36:ad:53:d1:3a:ec:50:38:96:84:c2:
                    6b:cf:e6:cd:f2:b4:0e:10:00:1a:ff:fb:bf:7a:ab:
                    a0:fe:59:d9:0b:76:9a:89:83:28:8a:e9:a3:90:56:
                    4b:7c:e9:46:84:2a:47:21:83:c6:d5:b3:37:f4:66:
                    25:86:c2:bd:ac:a1:87:23:89:61:a7:68:2e:b6:9f:
                    0f:19:57:e2:7a:2e:66:d3:32:ea:7a:d0:8b:a5:de:
                    a5:63:47:01:b4:47:86:dd:f4:0a:3c:13:d5:41:ad:
                    29:d3:d8:4e:99:c2:d1:03:15:d4:78:d1:4b:52:d1:
                    21:c5:ba:af:09:e1:0c:a3:47:d2:47:59:5c:c1:1a:
                    2a:de:e4:e3:6d:8d:dc:01:4d:ca:d7:91:91:0b:ea:
                    84:73:16:38:ef:89:e8:2e:0a:ef:c7:bb:41:d5:84:
                    be:16:e0:60:77:77:2a:a0:c1:4e:e9:f8:04:6b:41:
                    2c:58:33:29:46:fd:c8:1e:3d:14:86:16:c5:22:18:
                    cf:4c:41:4f:05:81:e1:c4:84:1c:39:77:d9:dc:7f:
                    f0:0c:4b:ad:c3:72:04:99:cc:52:14:36:65:63:73:
                    62:d8:23:d8:8b:b7:99:b5:aa:3d:2c:c5:08:b9:9b:
                    d4:3d:d0:51:4a:2f:77:4e:52:c6:8b:24:b2:af:c5:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:2E:90:BC:EA:F7:E8:9E:82:AA:EA:B4:22:FF:97:D7:BC:5B:7E
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:05:f4:e3:ef:8e:2b:ca:8f:aa:d5:4b:dc:a7:38:1f:f4:ba:
         48:ff:5d:44:9b:9d:22:23:b7:1a:50:19:d7:8f:02:5a:78:64:
         a3:69:01:48:55:34:1f:7d:7b:d1:5a:fd:1e:a1:d9:b4:a2:64:
         e5:fc:cf:34:83:8a:c8:38:34:0d:b5:b4:16:eb:7b:e0:07:e2:
         9c:58:70:8b:e2:22:0f:a5:c9:f9:91:16:63:36:61:e0:ff:20:
         3c:4a:c6:98:19:3e:e7:8e:d9:30:34:72:e2:b1:11:13:14:2d:
         63:cc:01:e0:79:c5:ce:22:2f:57:db:7f:b4:7c:bd:ce:eb:da:
         e3:49:35:49:b9:ff:bd:3e:62:e7:e0:fe:5e:ea:2f:5c:02:e4:
         9d:46:a2:95:9f:99:20:a8:56:ac:c8:79:00:91:f7:34:dc:71:
         94:5e:29:e2:20:4d:f4:0f:03:a4:47:cb:28:36:f4:b1:92:0e:
         cd:e2:df:01:c6:8b:08:c0:00:fa:e3:e9:e8:85:5f:ba:ee:08:
         ae:81:3b:85:f3:97:9a:cc:c6:ae:d0:d9:3d:e0:9d:a3:f7:11:
         1d:de:45:ab:ae:79:e8:24:64:8c:44:05:fb:c3:84:aa:76:e7:
         34:ab:4d:1b:8f:4f:f7:53:ba:a7:68:42:54:99:4b:10:b1:db:
         1a:5c:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:18:29 2025 by rpki-client